table <vaultwarden>       { 127.0.0.16 }
table <vaultwarden_ws>    { 127.0.0.16 }

ext_addr="142.171.124.60"
log connection

http protocol "wwwtls" {
	tls keypair "wild.averymt.dev"
        match response header remove "Server"

        pass request quick path "/notifications/hub/negotiate" \
                forward to <vaultwarden>
        pass request quick path "/notifications/hub" \
                forward to <vaultwarden_ws>
        pass request quick header "Host" value "vaultwarden.averymt.dev" \
                forward to <vaultwarden>

        return error
}
relay "wwwtlsproxy" {
        listen on $ext_addr port 443 tls
        protocol wwwtls

        forward to <vaultwarden> port 8000
        forward to <vaultwarden_ws> port 3012
}